Kali Linux

ROADTools: The Modern Azure AD Exploration Framework

ROADTools is a powerful framework designed for exploring and interacting with Microsoft Azure Active Directory (Azure AD). It is widely used by both Red Team and Blue Team security professionals to assess, analyze, and secure Azure AD environments. ROADTools consists of two main components: ROADlib and ROADrecon.

ROADlib: The Core Library for Azure AD Integration

ROADlib is the foundational library of ROADTools. It allows you to:

  • Authenticate securely with Azure AD.
  • Access and manipulate Azure AD data.
  • Build custom security tools integrated with ROADrecon databases.

The database model in ROADlib is automatically generated based on the Azure AD internal API metadata, ensuring accurate and up-to-date mappings of Azure AD objects. ROADlib can be easily imported in Python using:

from roadtools.roadlib import X

This library is fully compatible with Python 3.9 and above, leveraging modern asynchronous features for fast and efficient data processing.

ROADrecon: Exploring Azure AD Like a Pro

ROADrecon is a dedicated tool for in-depth exploration of Azure AD environments. It provides insights that are valuable for both offensive security testing (Red Team) and defensive monitoring (Blue Team).

Key features:

  • Offline Database Creation: Automatically generates an SQLAlchemy-backed database using Azure AD metadata.
  • Asynchronous Data Collection: Uses async HTTP requests to gather comprehensive Azure AD information efficiently.
  • Plugin System: Query the database and output results in multiple formats.
  • Web-Based Analysis Interface: Built with Angular, the interface allows intuitive exploration and visualization of Azure AD data offline.
  • Modern Compatibility: Supports Python 3.9+ with full async capabilities for faster execution and better stability.

Installation

1. Installing via PyPI

The easiest method is using pip:

pip install roadrecon

This command also adds the roadrecon CLI tool to your PATH, enabling quick command-line access.

2. Installing via GitHub

For the latest development versions:

git clone https://github.com/dirkjanm/ROADtools.git
pip install -e roadlib/
pip install -e roadrecon/

This approach allows you to stay up-to-date with the latest features and fixes.

Front-End Development (Optional)

To customize the Angular front-end:

  1. Ensure Node.js and npm are installed.
  2. Navigate to the front-end folder and install dependencies:
cd roadrecon/frontend/
npm install
  1. Run the Angular app locally:
npm start
  1. Build production-ready JavaScript files:
npm run build

Resources & Download

You can access ROADTools directly from its official GitHub repository, where you’ll find the latest versions, documentation, and installation instructions:

ROADTools GitHub Repository

R K

Recent Posts

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

7 days ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

7 days ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

1 week ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

2 weeks ago

ufw Command in Linux: Manage Firewall Rules with Examples

ufw (Uncomplicated Firewall) sits on top of iptables (or nftables on newer systems) and replaces…

2 weeks ago

who Command in Linux: Show All Logged-In Users and Sessions

When you share a server with a team or investigate unexpected activity, the first question…

2 weeks ago